René's URL Explorer Experiment


Title: Hardening: Block path traversal in package install via composer.json name by Copilot · Pull Request #237 · wp-cli/package-command · GitHub

Open Graph Title: Hardening: Block path traversal in package install via composer.json name by Copilot · Pull Request #237 · wp-cli/package-command

X Title: Hardening: Block path traversal in package install via composer.json name by Copilot · Pull Request #237 · wp-cli/package-command

Description: Lists, installs, and removes WP-CLI packages. Contribute to wp-cli/package-command development by creating an account on GitHub.

Open Graph Description: A malicious ZIP package with "name": ".." in its composer.json could cause wp package install to copy files outside the intended ~/.wp-cli/packages/local/ sandbox—landing payloa...

X Description: A malicious ZIP package with "name": ".." in its composer.json could cause wp package install to copy files outside the intended ~/.wp-cli/packages/local/ sandbo...

Opengraph URL: https://github.com/wp-cli/package-command/pull/237

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:d95dbbf0-dc98-3a90-60a4-c261c2742ebe
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idDEB8:27B67B:55717BB:70ADA26:6AFA2744
html-safe-nonce3c46539f178652ef13445ae79949e435cb55df21daccb4b4230d536ed336814b
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJERUI4OjI3QjY3Qjo1NTcxN0JCOjcwQURBMjY6NkFGQTI3NDQiLCJ2aXNpdG9yX2lkIjoiOTA3OTc0OTU5OTI4NjY2NzA3NiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac044fd4c5c1dc03f524d8e185b5c92791c045656df3160dd002a7d2aa3e5b0e63
hovercard-subject-tagpull_request:3589416623
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/wp-cli/package-command/237/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/83c0785d23a912a4eb0291ced82c330b1ebe97c031007e42925e7a192b139582/wp-cli/package-command/pull/237
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/83c0785d23a912a4eb0291ced82c330b1ebe97c031007e42925e7a192b139582/wp-cli/package-command/pull/237
og:image:altA malicious ZIP package with "name": ".." in its composer.json could cause wp package install to copy files outside the intended ~/.wp-cli/packages/local/ sandbox—landing payloa...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameCopilot
hostnamegithub.com
expected-hostnamegithub.com
None612d3e6ffd693e7ea8d9fcf452370995872baef31d825b1fedef704cd3d24ac7
turbo-cache-controlno-cache
go-importgithub.com/wp-cli/package-command git https://github.com/wp-cli/package-command.git
octolytics-dimension-user_id1570774
octolytics-dimension-user_loginwp-cli
octolytics-dimension-repository_id84599440
octolytics-dimension-repository_nwowp-cli/package-command
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id84599440
octolytics-dimension-repository_network_root_nwowp-cli/package-command
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release072e34035c13c31543fba9f025cbbbda4210dae4
ui-targetfull
theme-color#1e2327
color-schemelight dark
react-app-namepull-requests

Links:

Skip to contenthttps://github.com/wp-cli/package-command/pull/237#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fwp-cli%2Fpackage-command%2Fpull%2F237
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fwp-cli%2Fpackage-command%2Fpull%2F237
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=wp-cli%2Fpackage-command
Reloadhttps://github.com/wp-cli/package-command/pull/237
Reloadhttps://github.com/wp-cli/package-command/pull/237
Reloadhttps://github.com/wp-cli/package-command/pull/237
wp-clihttps://github.com/wp-cli
package-commandhttps://github.com/wp-cli/package-command
Codehttps://github.com/wp-cli/package-command
Issueshttps://github.com/wp-cli/package-command/issues
Pull requests1 (1)https://github.com/wp-cli/package-command/pulls
Actionshttps://github.com/wp-cli/package-command/actions
Security and qualityhttps://github.com/wp-cli/package-command/security
Insightshttps://github.com/wp-cli/package-command/pulse
https://github.com/wp-cli/package-command
swissspidyhttps://github.com/swissspidy
mainhttps://github.com/wp-cli/package-command/tree/main
copilot/hardening-path-traversal-issuehttps://github.com/wp-cli/package-command/tree/copilot/hardening-path-traversal-issue
Conversationhttps://github.com/wp-cli/package-command/pull/237
Commits7 (7)https://github.com/wp-cli/package-command/pull/237/commits
Checkshttps://github.com/wp-cli/package-command/pull/237/checks
Files changedhttps://github.com/wp-cli/package-command/pull/237/files
Hardening: Block path traversal in package install via composer.json namehttps://github.com/wp-cli/package-command/pull/237#top
swissspidyhttps://github.com/swissspidy
mainhttps://github.com/wp-cli/package-command/tree/main
copilot/hardening-path-traversal-issuehttps://github.com/wp-cli/package-command/tree/copilot/hardening-path-traversal-issue
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
Apr 27, 2026https://github.com/wp-cli/package-command/pull/237#issue-4335472060
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
https://github.com/apps/copilot-swe-agent
Initial planhttps://github.com/wp-cli/package-command/pull/237/commits/3cfa2c5b255ad2c1458065880658ac21f8cf1f73
3cfa2c5https://github.com/wp-cli/package-command/pull/237/commits/3cfa2c5b255ad2c1458065880658ac21f8cf1f73
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
swissspidyhttps://github.com/swissspidy
Apr 27, 2026https://github.com/wp-cli/package-command/pull/237#event-24903768721
started workhttps://github.com/wp-cli/package-command/sessions/159d5271-2365-4bfe-8f16-6fd715d1a133
swissspidyhttps://github.com/swissspidy
April 27, 2026 11:46https://github.com/wp-cli/package-command/pull/237#event-24903770954
View session https://github.com/wp-cli/package-command/sessions/159d5271-2365-4bfe-8f16-6fd715d1a133
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
Apr 27, 2026https://github.com/wp-cli/package-command/pull/237#event-24903771249
Hardening: Path traversal in package install via composer.json name #236 https://github.com/wp-cli/package-command/issues/236
Copilothttps://github.com/apps/copilot-swe-agent
April 27, 2026 11:58https://github.com/wp-cli/package-command/pull/237#commits-pushed-ef1653a
https://github.com/apps/copilot-swe-agent
https://github.com/swissspidy
Add path traversal hardening: validate package name and check destina…https://github.com/wp-cli/package-command/pull/237/commits/ef1653ae04043e59eb094e2c5515547dbe76920c
ef1653ahttps://github.com/wp-cli/package-command/pull/237/commits/ef1653ae04043e59eb094e2c5515547dbe76920c
https://github.com/wp-cli/package-command/sessions/159d5271-2365-4bfe-8f16-6fd715d1a133https://github.com/wp-cli/package-command/sessions/159d5271-2365-4bfe-8f16-6fd715d1a133
https://github.com/apps/copilot-swe-agent
https://github.com/swissspidy
Rename test helper PHP file for clarityhttps://github.com/wp-cli/package-command/pull/237/commits/0d3523180e781a5131bc4bbde2d3e1469d219778
0d35231https://github.com/wp-cli/package-command/pull/237/commits/0d3523180e781a5131bc4bbde2d3e1469d219778
https://github.com/wp-cli/package-command/sessions/159d5271-2365-4bfe-8f16-6fd715d1a133https://github.com/wp-cli/package-command/sessions/159d5271-2365-4bfe-8f16-6fd715d1a133
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
Apr 27, 2026https://github.com/wp-cli/package-command/pull/237#event-24904295430
finished workhttps://github.com/wp-cli/package-command/sessions/159d5271-2365-4bfe-8f16-6fd715d1a133
swissspidyhttps://github.com/swissspidy
April 27, 2026 12:01https://github.com/wp-cli/package-command/pull/237#event-24904300973
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
swissspidyhttps://github.com/swissspidy
April 27, 2026 12:01https://github.com/wp-cli/package-command/pull/237#event-24904301062
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
bug https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Abug
command:package-install https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Acommand%3Apackage-install
scope:distribution https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Ascope%3Adistribution
state:unconfirmed https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Astate%3Aunconfirmed
Apr 27, 2026https://github.com/wp-cli/package-command/pull/237#event-24904330448
https://github.com/apps/codecov
codecovhttps://github.com/apps/codecov
Apr 27, 2026https://github.com/wp-cli/package-command/pull/237#issuecomment-4326790404
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
Codecovhttps://app.codecov.io/gh/wp-cli/package-command/pull/237?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=wp-cli
Files with missing lineshttps://app.codecov.io/gh/wp-cli/package-command/pull/237?dropdown=coverage&src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=wp-cli
src/Package_Command.phphttps://app.codecov.io/gh/wp-cli/package-command/pull/237?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=wp-cli#diff-c3JjL1BhY2thZ2VfQ29tbWFuZC5waHA=
22 Missing ⚠️ https://app.codecov.io/gh/wp-cli/package-command/pull/237?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=wp-cli
Let us know!https://github.com/codecov/feedback/issues/255
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
Apr 27, 2026 https://github.com/wp-cli/package-command/pull/237#pullrequestreview-4180840102
View reviewed changes https://github.com/wp-cli/package-command/pull/237/files/0d3523180e781a5131bc4bbde2d3e1469d219778
features/package-install.featurehttps://github.com/wp-cli/package-command/pull/237/files/0d3523180e781a5131bc4bbde2d3e1469d219778#diff-478c73f079339f9aded6594bf0438a8384a88a381293515ce072206ea1cb7364
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
https://github.com/swissspidy
Apply suggestion fromhttps://github.com/wp-cli/package-command/pull/237/commits/0655ac35df1d3739984a6b200b3f9f7adfc1caa9
@swissspidyhttps://github.com/swissspidy
0655ac3https://github.com/wp-cli/package-command/pull/237/commits/0655ac35df1d3739984a6b200b3f9f7adfc1caa9
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
April 27, 2026 13:26https://github.com/wp-cli/package-command/pull/237#event-24907418336
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
code ownerhttps://github.com/wp-cli/package-command/blob/b195ae99b40d8cc35f8570a6a40f4bd9b476523d/.github/CODEOWNERS#L1
April 27, 2026 13:26https://github.com/wp-cli/package-command/pull/237#event-24907418724
https://github.com/apps/copilot-pull-request-reviewer
Copilothttps://github.com/apps/copilot-pull-request-reviewer
April 27, 2026 13:26https://github.com/wp-cli/package-command/pull/237#event-24907418769
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
2.7.2https://github.com/wp-cli/package-command/milestone/47
Apr 27, 2026https://github.com/wp-cli/package-command/pull/237#event-24907422390
started reviewinghttps://github.com/wp-cli/package-command/sessions/b6026de9-4426-4545-858f-3d7193a8d229
swissspidyhttps://github.com/swissspidy
April 27, 2026 13:27https://github.com/wp-cli/package-command/pull/237#event-24907438263
View session https://github.com/wp-cli/package-command/sessions/b6026de9-4426-4545-858f-3d7193a8d229
https://github.com/apps/copilot-pull-request-reviewer
Sign in to viewhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fwp-cli%2Fpackage-command%2Fpull%2F237
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
started workhttps://github.com/wp-cli/package-command/sessions/d84b0dfc-3c57-40c3-82e8-fbe52598eb58
swissspidyhttps://github.com/swissspidy
April 27, 2026 13:39https://github.com/wp-cli/package-command/pull/237#event-24907914762
View session https://github.com/wp-cli/package-command/sessions/d84b0dfc-3c57-40c3-82e8-fbe52598eb58
https://github.com/apps/copilot-swe-agent
https://github.com/swissspidy
Fix docblock wording and add no-artifact assertions to traversal testhttps://github.com/wp-cli/package-command/pull/237/commits/538cad5fb899107c020b44294afdd390893ab49a
538cad5https://github.com/wp-cli/package-command/pull/237/commits/538cad5fb899107c020b44294afdd390893ab49a
https://github.com/wp-cli/package-command/sessions/d84b0dfc-3c57-40c3-82e8-fbe52598eb58https://github.com/wp-cli/package-command/sessions/d84b0dfc-3c57-40c3-82e8-fbe52598eb58
finished workhttps://github.com/wp-cli/package-command/sessions/d84b0dfc-3c57-40c3-82e8-fbe52598eb58
swissspidyhttps://github.com/swissspidy
April 27, 2026 13:42https://github.com/wp-cli/package-command/pull/237#event-24908018809
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
swissspidyhttps://github.com/swissspidy
April 27, 2026 13:42https://github.com/wp-cli/package-command/pull/237#event-24908018837
https://github.com/swissspidy
Sign in to viewhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fwp-cli%2Fpackage-command%2Fpull%2F237
https://github.com/apps/gemini-code-assist
gemini-code-assisthttps://github.com/apps/gemini-code-assist
Apr 27, 2026 https://github.com/wp-cli/package-command/pull/237#pullrequestreview-4181553740
View reviewed changes https://github.com/wp-cli/package-command/pull/237/files/538cad5fb899107c020b44294afdd390893ab49a
gemini-code-assisthttps://github.com/apps/gemini-code-assist
https://github.com/wp-cli/package-command/pull/237#pullrequestreview-4181553740
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
src/Package_Command.phphttps://github.com/wp-cli/package-command/pull/237/files/538cad5fb899107c020b44294afdd390893ab49a#diff-018db25244cbb65e067cfe2af1036721c652d9c8c20d43857d919e341aa35f3d
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
src/Package_Command.phphttps://github.com/wp-cli/package-command/pull/237/files/538cad5fb899107c020b44294afdd390893ab49a#diff-018db25244cbb65e067cfe2af1036721c652d9c8c20d43857d919e341aa35f3d
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
Apr 27, 2026 https://github.com/wp-cli/package-command/pull/237#pullrequestreview-4181673953
View reviewed changes https://github.com/wp-cli/package-command/pull/237/files/538cad5fb899107c020b44294afdd390893ab49a
features/package-install.featurehttps://github.com/wp-cli/package-command/pull/237/files/538cad5fb899107c020b44294afdd390893ab49a#diff-478c73f079339f9aded6594bf0438a8384a88a381293515ce072206ea1cb7364
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
started workhttps://github.com/wp-cli/package-command/sessions/7bc70ad5-73a0-45a9-b337-7be724bfffcb
swissspidyhttps://github.com/swissspidy
April 27, 2026 14:21https://github.com/wp-cli/package-command/pull/237#event-24909597870
View session https://github.com/wp-cli/package-command/sessions/7bc70ad5-73a0-45a9-b337-7be724bfffcb
https://github.com/apps/copilot-swe-agent
https://github.com/swissspidy
Fix test: assert vendor/autoload.php does not exist instead of checki…https://github.com/wp-cli/package-command/pull/237/commits/c4f7ef41c3b2bc33839a0a48d12e6e485b96fcc3
c4f7ef4https://github.com/wp-cli/package-command/pull/237/commits/c4f7ef41c3b2bc33839a0a48d12e6e485b96fcc3
https://github.com/wp-cli/package-command/sessions/7bc70ad5-73a0-45a9-b337-7be724bfffcbhttps://github.com/wp-cli/package-command/sessions/7bc70ad5-73a0-45a9-b337-7be724bfffcb
finished workhttps://github.com/wp-cli/package-command/sessions/7bc70ad5-73a0-45a9-b337-7be724bfffcb
swissspidyhttps://github.com/swissspidy
April 27, 2026 14:24https://github.com/wp-cli/package-command/pull/237#event-24909706875
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
swissspidyhttps://github.com/swissspidy
April 27, 2026 14:24https://github.com/wp-cli/package-command/pull/237#event-24909707527
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
Apr 27, 2026 https://github.com/wp-cli/package-command/pull/237#pullrequestreview-4183989035
View reviewed changes https://github.com/wp-cli/package-command/pull/237/files/c4f7ef41c3b2bc33839a0a48d12e6e485b96fcc3
src/Package_Command.phphttps://github.com/wp-cli/package-command/pull/237/files/c4f7ef41c3b2bc33839a0a48d12e6e485b96fcc3#diff-018db25244cbb65e067cfe2af1036721c652d9c8c20d43857d919e341aa35f3d
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
started workhttps://github.com/wp-cli/package-command/sessions/c458f3cb-4cae-4b57-b796-a60a092eea37
swissspidyhttps://github.com/swissspidy
April 27, 2026 20:31https://github.com/wp-cli/package-command/pull/237#event-24922013512
View session https://github.com/wp-cli/package-command/sessions/c458f3cb-4cae-4b57-b796-a60a092eea37
https://github.com/apps/copilot-swe-agent
https://github.com/swissspidy
Fix is_child_path: resolve .. segments and use case-insensitive compa…https://github.com/wp-cli/package-command/pull/237/commits/ab278f6400c95166f9ec29e158f38f298fe5b696
ab278f6https://github.com/wp-cli/package-command/pull/237/commits/ab278f6400c95166f9ec29e158f38f298fe5b696
https://github.com/wp-cli/package-command/sessions/c458f3cb-4cae-4b57-b796-a60a092eea37https://github.com/wp-cli/package-command/sessions/c458f3cb-4cae-4b57-b796-a60a092eea37
finished workhttps://github.com/wp-cli/package-command/sessions/c458f3cb-4cae-4b57-b796-a60a092eea37
swissspidyhttps://github.com/swissspidy
April 27, 2026 20:34https://github.com/wp-cli/package-command/pull/237#event-24922124514
https://github.com/apps/copilot-swe-agent
Copilothttps://github.com/apps/copilot-swe-agent
swissspidyhttps://github.com/swissspidy
April 27, 2026 20:34https://github.com/wp-cli/package-command/pull/237#event-24922125148
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
state:unconfirmed https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Astate%3Aunconfirmed
May 2, 2026https://github.com/wp-cli/package-command/pull/237#event-25097091215
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
b2765dahttps://github.com/wp-cli/package-command/commit/b2765da6ce28c4db0480fff77da668cf07c58f1a
May 19, 2026https://github.com/wp-cli/package-command/pull/237#event-25704969231
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
https://github.com/swissspidy
swissspidyhttps://github.com/swissspidy
May 19, 2026 12:21https://github.com/wp-cli/package-command/pull/237#event-25704970892
https://github.co/hiddenchars
https://github.com/wp-cli/package-command/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fwp-cli%2Fpackage-command%2Fpull%2F237
Copilot code review https://github.com/apps/copilot-pull-request-reviewer
Copilot https://github.com/apps/copilot-pull-request-reviewer
Learn more about Copilot code review.https://gh.io/copilot-code-review-docs
https://github.com/wp-cli/package-command/pull/237/files/0655ac35df1d3739984a6b200b3f9f7adfc1caa9
https://github.com/swissspidy
swissspidy https://github.com/swissspidy
https://github.com/apps/gemini-code-assist
gemini-code-assist[bot] https://github.com/apps/gemini-code-assist
https://github.com/wp-cli/package-command/pull/237/files/538cad5fb899107c020b44294afdd390893ab49a
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
https://github.com/swissspidy
swissspidy https://github.com/swissspidy
Copilot code review https://github.com/apps/copilot-swe-agent
Copilot https://github.com/apps/copilot-swe-agent
bug https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Abug
command:package-install https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Acommand%3Apackage-install
scope:distribution https://github.com/wp-cli/package-command/issues?q=state%3Aopen%20label%3Ascope%3Adistribution
2.7.2 https://github.com/wp-cli/package-command/milestone/47
Hardening: Path traversal in package install via composer.json name https://github.com/wp-cli/package-command/issues/236
Please reload this pagehttps://github.com/wp-cli/package-command/pull/237
https://github.com/apps/copilot-swe-agent
https://github.com/swissspidy
https://github.com/apps/copilot-pull-request-reviewer
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.